OSV-2023-495

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2023-495.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-495
Published
2023-06-18T14:01:41.997633Z
Modified
2023-06-18T14:01:41.997865Z
Summary
Heap-buffer-overflow in utf8ToUtf16
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59884

Crash type: Heap-buffer-overflow WRITE 2
Crash state:
utf8ToUtf16
utf8ToUtf16WithBom
Lexer::getObj
References

Affected packages

OSS-Fuzz / poppler

Package

Name
poppler
Purl
pkg:generic/poppler

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/poppler/poppler.git
Events
Introduced
9183da4fcb8d06360ed51f7f1131a14300008735
Fixed
e885124ab3b071b7fbb2f001e4a9a88b7e758605
Fixed
f0d648c3f0cb69121d0115d468401d58255ad0cf

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"cd99989705824202d157c33d48c998e9818ea2f3:f0d648c3f0cb69121d0115d468401d58255ad0cf"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2023-495.yaml"
introduced_range 
"7cf6cd7b9a0fc496738c245421eea54ec669448d:222982849168a8aa0a78cb2a4fa2b903f2f74146"